HM Revenue & Customs (HMRC) is calling on taxpayers to stay vigilant in the fight against fraudsters, who are using email and text messages to scam them out of their savings.
Fraudsters are sending out scam emails and SMS-messages to trick the public into thinking they have received a tax rebate so that they will hand over their bank account and personal details.
HMRC says the scale of the problem is immense: it received 771,227 customer phishing email/SMS referrals in the last tax year.
Treasury minister Mel Stride MP, the financial secretary to the Treasury, says: “HMRC only informs you about tax refunds through the post or through your pay via your employer. All emails, text messages, or voicemail messages saying you have a tax refund are a scam. Do not click on any links in these messages, and forward them to HMRC’s phishing email address and phone number.
“We know that criminals will try to use events like the end of the financial year, the self-assessment deadline and the issuing of tax refunds to target the public and attempt to get them to reveal their personal data. It is important to be alert to the danger.”
Many of these fraudulent emails and texts include links which take the user to dubious websites where their information can be stolen. These sites are a focus of HMRC’s efforts to tackle fraud. In March 2018, it requested 2,672 phishing websites be taken down and received 84,549 phishing reports. This kind of phishing is expected to continue in the coming months as genuine tax refunds are issued.
Income Tax for 6 April 2017 to 5 April 2018 will be calculated over the coming months and anyone owed a genuine tax rebate will receive a tax calculation letter by post between June and October.
If you haven’t paid the right amount at the end of the tax year, HMRC will post you a tax calculation. If you have paid too much tax, HMRC’s letter will explain how you can get your refund paid to you. If you have not paid enough tax, the letter will tell you how much you owe and how you can pay.
To guard against fraudsters, HMRC advises customers to:
- recognise the signs - genuine organisations, such as banks and HMRC ,will never contact you out of the blue to ask for your PIN, password or bank details
- stay safe - do not give out private information, reply to text messages, download attachments or click on links in emails you weren’t expecting
- take action - forward suspicious emails claiming to be from HMRC to firstname.lastname@example.org and texts to 60599, or contact Action Fraud on 0300 123 2040 to report any suspicious calls or use its online fraud reporting tool
- check Gov.uk for information on how to avoid and report scams and recognise genuine HMRC contact